CVE-2019-19728

CVE-2019-19728 affects Slurm (SchedMD Slurm, slurm-llnl) where versions before 18.08.9 and 19.x before 19.05.5 allow a user’s srun --uid to execute with incorrect privileges, enabling privilege escalation. The vulnerability stems from improper privilege handling in srun when using the --uid optio...

CVE-2019-19728

SchedMD Slurm before 18.08.9 and 19.x before 19.05.5 executes srun --uid with incorrect privileges...

Fedora 31 : slurm (2019-f5fe4e10d7)

Release of 19.05.5. Closes security issues CVE-2019-19727, CVE-2019-19728. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 30 : slurm (2019-a93d9cbe53)

Release of 19.05.5. Closes security issues CVE-2019-19727, CVE-2019-19728. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

[SECURITY] Fedora 31 Update: slurm-19.05.5-1.fc31

Slurm is an open source, fault-tolerant, and highly scalable cluster management and job scheduling system for Linux clusters. Components include machine status, partition management, job management, scheduling and accounting modules...

Fedora Update for slurm FEDORA-2019-f5fe4e10d7

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 30 Update: slurm-19.05.5-1.fc30

Slurm is an open source, fault-tolerant, and highly scalable cluster management and job scheduling system for Linux clusters. Components include machine status, partition management, job management, scheduling and accounting modules...

Fedora Update for slurm FEDORA-2019-a93d9cbe53

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE: Security Advisory for slurm (openSUSE-SU-2019:2052-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE SLES12 Security Update : slurm (SUSE-SU-2019:3385-1)

This update for slurm fixes the following issues : Security issues fixed : CVE-2019-6438: Fixed SchedMD Slurm that mishandles 32-bit systems bnc1123304. Fix permissions of slurmdbd.conf bsc1155784. Bug fixes: Fix ownership of /var/spool/slurm on new installations and upgrade bsc1158696. Fix...

SUSE-SU-2019:3385-1 Security update for slurm

This update for slurm fixes the following issues: Security issues fixed: - CVE-2019-6438: Fixed SchedMD Slurm that mishandles 32-bit systems bnc1123304. - Fix permissions of slurmdbd.conf bsc1155784. Bug fixes: - Fix ownership of /var/spool/slurm on new installations and upgrade bsc1158696. - Fix...

SUSE SLES12 Security Update : slurm (SUSE-SU-2019:3080-1)

This update for slurm fixes the following issues : Security issue fixed : CVE-2019-6438: Fixed a heap overflow on 32-bit systems in xmalloc bsc1123304. CVE-2019-12838: Fixed an SQL injection bsc1140709. Note that Tenable Network Security has extracted the preceding description block directly from...

SUSE-SU-2019:3080-1 Security update for slurm

This update for slurm fixes the following issues: Security issue fixed: - CVE-2019-6438: Fixed a heap overflow on 32-bit systems in xmalloc bsc1123304. - CVE-2019-12838: Fixed an SQL injection bsc1140709...

openSUSE: Security Advisory for slurm (openSUSE-SU-2019:2536-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : slurm (openSUSE-2019-2536)

This update for slurm fixes the following issues : Security issue fixed : - CVE-2019-12838: Fixed a SQL injection bsc1140709. Non-security issue fixed : - Added X11-forwarding bsc1153245. - Moved srun from 'slurm' to 'slurm-node': srun is required on the nodes as well so sbatch will work...

OPENSUSE-SU-2019:2536-1 Security update for slurm

This update for slurm fixes the following issues: Security issue fixed: - CVE-2019-12838: Fixed an SQL injection bsc1140709. Non-security issue fixed: - Added X11-forwarding bsc1153245. - Moved srun from 'slurm' to 'slurm-node': srun is required on the nodes as well so sbatch will work...

Security update for slurm (moderate)

openSUSE Security Update: Security update for slurm Announcement ID: openSUSE-SU-2019:2536-1 Rating: moderate References: 1140709 1153095 1153245 Cross-References: CVE-2019-12838 Affected Products: openSUSE Leap 15.0 An update that solves one vulnerability and has two fixes is now available...

Debian DSA-4572-1 : slurm-llnl - security update

It was discovered that the Simple Linux Utility for Resource Management SLURM, a cluster resource management and job scheduling system, did not escape strings when importing an archive file into the accountingstorage/mysql backend, resulting in SQL injection. C Tenable Network Security, Inc. The...

Debian: Security Advisory (DSA-4572-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 4572-1] slurm-llnl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4572-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 18, 2019 https://www.debian.org/security/faq -...